js/xpconnect/crashtests/754311-iframe.html

branch
TOR_BUG_3246
changeset 7
129ffea94266
equal deleted inserted replaced
-1:000000000000 0:edaf81b6b057
1 <html>
2 <head>
3 <script type="application/javascript">
4
5 function boom() {
6 // Don't crash when transplanting wrappers with cyclic references.
7 document.documentElement.dataset.xml = document.documentElement.dataset;
8 document.open();
9
10 // Tell the parent window that we're done.
11 window.parent.allDone();
12 }
13
14 // This needs to do a round-trip through the event loop to work right.
15 window.onload = function() { setTimeout(boom, 0); };
16
17 </script>
18 </head>
19 <body>
20 </body>
21 </html>

mercurial